CVE-2024-9474: medium-severity vulnerability in Palo Alto Networks PAN-OS
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.
A Palo Alto Networks PAN-OS administrator can perform actions with root-level privileges through the web management interface, bypassing normal permission restrictions. This allows an admin to gain unauthorized elevated access to the firewall system.
A privilege escalation vulnerability in PAN-OS web management interface allows an authenticated administrator to execute arbitrary actions with root privileges. The vulnerability requires valid admin credentials and access to the management interface; exploitation results in complete system compromise beyond the attacker's assigned role permissions.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.